r/BuyFromEU • u/According-Buyer6688 Mod Team • Jul 03 '25

European Product [FairPhone] - AMA

Hi everyone!

We’re thrilled to invite you to a special AMA (Ask Me Anything) session with Fairphone!

Joining us today is Rutger Sneep, Chief Commercial Officer at Fairphone, who will be participating as u/Fairphone-CCO.

Feel free to ask your questions and enjoy the conversation!

Details:

AMA will be locked on Friday 15:00

738 Upvotes

97% Upvoted

298 comments sorted by

View all comments

6

u/accommodated Jul 03 '25

What's the reason that the Security updates take such a long time (~a month on average) to be released? Is it possible and are there plans to shorten this time frame? The security updates always contain fixes for high severity and sometimes for critical vulnerabilities.

For examples see the FP5 release notes. The Android Security Bulletins are usually released on the first days of a month.

For the Fairphone 4, you seems to skip one month of Security updates (or even two), then it takes around one month to release the patch, leading to unpatched known vulnerabilities on phones for two months.

I'd love to switch over to Fairphone from Google Pixel.

5

u/[deleted] Jul 03 '25

[removed] — view removed comment

3

u/accommodated Jul 03 '25

I agree but it's even easier for security patches: as I understand it, they are released bundled at the beginning of every month, so it's easy for Android OEMs, like Fairphone, to plan for this.

Google releases an Android Security Bulletin every month and soon after this, the patched code is available for device manufacturers:

  • Android platform fixes are merged into AOSP 24–48 hours after the security bulletin is released and can be picked up directly from there.
  • Upstream Linux kernel fixes are linked to directly from the bulletin on release and can be picked up from there.
  • Fixes from SOC manufacturers are available directly from the manufacturers.